Storm Ransomware Group Claims Breach of Australian Farm Machinery Dealer Agrimac The Storm ransomware group has alleged a cyberattack on Agrimac, a Warrnambool-based farm machinery dealership in Victoria, Australia. The hackers posted details of the breach on their darknet leak site on 26 August, setting a 13 October deadline for publication if demands are not met. Storm shared 16 documents as proof of the attack, including payroll records, customer contact details, risk assessments, and sales invoices. The leak page has been viewed 934 times since its posting. Agrimac has not responded to requests for comment. Storm, a relatively new threat actor that emerged in August, has listed 41 alleged victims to date, with five in Australia, including Ramsey Bros, Westco Motors Cairns, and Sharp Motor Group. Sharp Motor Group confirmed a cybersecurity incident last week, attributing it to a third-party IT provider breach, though it remains unclear if other victims were similarly compromised. Most of Storm’s Australian targets have been automotive or farm machinery dealers. The group describes itself as a "premier, results-driven firm" operating at the intersection of high finance and strategic services. Agrimac operates three dealerships in Warrnambool, Hamilton, and Horsham, specializing in Kubota and Krone machinery, with over 40 employees. The full extent of the breach, including ransom demands and data volume, remains undisclosed.

Storm Ransomware Group Strikes Again, Targets Fourth Australian Automotive Dealer The Storm ransomware group has claimed its fourth Australian victim, listing the Sharp Motor Group on its leak site on 23 August. While the full extent of the stolen data remains undisclosed, the hackers have released samples as proof, including employee passport and driver’s license scans, financial records, customer invoices, and login credentials. Storm has threatened to publish the entire dataset on 14 September if demands are not met. Sharp Motor Group, which operates dealerships in Tweed Heads, NSW, confirmed the incident, stating that its third-party IT provider was compromised. The company is working with independent cybersecurity experts and authorities, including the Office of the Australian Information Commissioner (OAIC), to investigate. A spokesperson emphasized that customer and staff privacy remains the top priority. Storm, a relatively new ransomware operation, has rapidly expanded its victim list, claiming 26 targets since its emergence this month four of them Australian, including Ramsey Bros and Westco Motors Cairns. The group positions itself as a "premier, results-driven firm" and actively recruits affiliates, while avoiding attacks on organizations within the Commonwealth of Independent States (CIS). Sharp Motor Group, known for its new and used vehicle sales, trade-ins, and financing services, serves customers in Tweed Heads, the Northern Rivers, and the Gold Coast. The breach highlights the growing risk of supply chain attacks, where cybercriminals exploit vulnerabilities in third-party vendors to gain access to larger targets.

Storm Ransomware Group Strikes Third Australian Victim, Leaks Sensitive Data The Storm ransomware group, which surfaced earlier this month, has claimed its third Australian victim, Westco Motors Cairns, after allegedly breaching the company’s systems. On 17 August, the hackers posted details of the attack on their darknet leak site, threatening to publish stolen data on 12 October an unusually extended deadline for ransom negotiations. While Storm has not disclosed the ransom demand or the total volume of stolen data, it has already released over a dozen documents, including vehicle identification numbers, tax invoices, and customer contact details (email addresses and phone numbers). Westco Motors, a BMW and MINI dealership based in Tropical North Queensland, has not responded to requests for comment. Since its emergence, Storm has listed 26 alleged victims, with three in Australia including Ramsey Bros, targeted around the same time as Westco Motors. The group positions itself as a "premier, results-driven firm" at the intersection of finance and cyber operations, explicitly avoiding targets in the Commonwealth of Independent States (CIS). Storm is also actively recruiting affiliates, seeking "dedicated specialists" to join its operations. Westco Motors, which markets itself as the largest prestige car dealership in the region, offers vehicle sales, servicing, and financial services. The breach underscores the growing threat posed by Storm, a new but rapidly expanding ransomware operation.